$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42d2eef9-e80c-37ed-a5cf-d4e73a3e3060.roa File: 42d2eef9-e80c-37ed-a5cf-d4e73a3e3060.roa (raw, json) Hash identifier: IWiWvL4EFDaPQOWia0zeNJOCAmjBgr6W9mZYkhd8iDE= Subject key identifier: 1A:2E:FF:FD:EB:AD:84:4C:7D:3C:16:C9:FD:4E:D3:07:D1:DB:1D:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAD626A8E4DDEC2EF7A492280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42d2eef9-e80c-37ed-a5cf-d4e73a3e3060.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 36619 IP address blocks: 199.7.71.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:6a:8e:4d:de:c2:ef:7a:49:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=5127dc71-3eb9-444b-b4ee-8b6a09b744cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:7f:0a:24:bd:08:87:c4:9d:12:7e:0b:9d: 6c:49:ee:72:83:be:a3:5b:82:ae:b7:21:e0:2f:d8: e3:25:87:bd:27:a8:69:5c:71:c8:d1:7c:27:fa:56: cb:e4:80:68:ff:a8:4a:ea:39:b7:c8:61:83:c2:63: 54:02:f1:d0:2d:bb:ff:a0:57:e1:ed:7c:21:ed:8a: b1:d8:45:45:7e:73:19:fa:cd:2b:81:58:1a:63:49: e7:68:b7:25:02:f7:f7:63:30:a8:68:14:f1:e8:00: 6c:f5:5b:68:8a:48:24:18:46:92:62:f0:31:57:a2: 72:7f:3e:e5:6c:1f:19:23:4f:a1:4f:0c:0f:ae:fb: 52:87:d8:a9:78:88:67:92:7f:fd:71:15:69:87:be: d9:8a:46:8f:dd:ce:e0:e6:4d:a5:f6:05:bb:4b:55: f6:97:da:a6:71:2a:1f:22:de:49:e4:9d:eb:6f:62: 9c:8d:6a:71:39:24:fa:2e:81:e0:26:e5:96:86:fd: 61:0a:70:ec:21:31:7e:ec:78:4d:09:94:5f:86:17: f4:0e:4d:60:85:7f:86:fd:bf:2e:07:0a:7b:11:b9: f1:b2:1c:ee:36:53:61:51:29:71:14:f4:d7:db:85: 20:17:7d:3b:8c:f5:7c:52:51:17:94:73:ee:f0:26: 05:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2E:FF:FD:EB:AD:84:4C:7D:3C:16:C9:FD:4E:D3:07:D1:DB:1D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42d2eef9-e80c-37ed-a5cf-d4e73a3e3060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:22:07:4b:ad:fb:67:94:18:d0:2c:4b:cc:a8:c0:25:1b:5f: bb:53:0f:9f:d6:cc:90:34:5d:e8:d3:86:18:c2:3e:45:03:a1: 86:b6:16:37:84:9d:8f:32:64:e6:7e:76:00:ae:6b:47:b1:57: 00:7e:84:3e:33:5d:65:9e:60:b1:06:c8:4b:63:b8:2a:2c:64: a6:20:d9:99:0e:a2:44:d7:72:b5:c1:77:58:b9:29:56:1b:cd: a6:12:a3:04:47:f0:81:c6:1d:ae:44:49:69:a2:10:a6:6d:cd: 59:86:84:6d:d4:e4:e5:69:5a:13:c0:5b:5d:f1:0c:ee:b1:a6: 49:39:00:14:5c:b8:86:9a:0a:13:5c:4c:14:31:09:a3:04:41: f0:95:6d:81:12:15:d8:51:c1:11:05:b5:83:10:1d:04:2b:48: aa:3d:ff:4a:91:83:5f:90:96:ad:0a:6d:3f:43:6f:ef:64:87: 59:97:dc:10:ec:ce:b1:cd:f1:de:2f:78:1f:6a:63:68:90:8a: a0:78:e5:dd:00:01:8e:7a:9e:3e:0b:5d:9b:b7:67:3a:83:ca: 8f:19:4e:e1:d1:ec:77:ac:b5:ef:18:1d:8e:7e:ab:cf:53:eb: 79:88:d5:65:80:fb:db:02:9e:63:d5:e3:39:cc:65:c8:54:f4: f3:9f:3c:91 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEutYmqOTd7C73pJIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NTEyN2RjNzEtM2ViOS00NDRiLWI0ZWUtOGI2YTA5Yjc0NGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloh/CiS9CIfEnRJ+C51sSe5yg76jW4KutyHg L9jjJYe9J6hpXHHI0Xwn+lbL5IBo/6hK6jm3yGGDwmNUAvHQLbv/oFfh7Xwh7Yqx 2EVFfnMZ+s0rgVgaY0nnaLclAvf3YzCoaBTx6ABs9VtoikgkGEaSYvAxV6Jyfz7l bB8ZI0+hTwwPrvtSh9ipeIhnkn/9cRVph77ZikaP3c7g5k2l9gW7S1X2l9qmcSof It5J5J3rb2KcjWpxOST6LoHgJuWWhv1hCnDsITF+7HhNCZRfhhf0Dk1ghX+G/b8u Bwp7EbnxshzuNlNhUSlxFPTX24UgF307jPV8UlEXlHPu8CYFGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBou//3rrYRMfTwWyf1O0wfR2x0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDJkMmVlZjktZTgwYy0z N2VkLWE1Y2YtZDRlNzNhM2UzMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhIgdLrftnlBjQLEvMqMAlG1+7Uw+f1syQNF3o04YYwj5FA6GGthY3 hJ2PMmTmfnYArmtHsVcAfoQ+M11lnmCxBshLY7gqLGSmINmZDqJE13K1wXdYuSlW G82mEqMER/CBxh2uRElpohCmbc1ZhoRt1OTlaVoTwFtd8QzusaZJOQAUXLiGmgoT XEwUMQmjBEHwlW2BEhXYUcERBbWDEB0EK0iqPf9KkYNfkJatCm0/Q2/vZIdZl9wQ 7M6xzfHeL3gfamNokIqgeOXdAAGOep4+C12bt2c6g8qPGU7h0ex3rLXvGB2OfqvP U+t5iNVlgPvbAp5j1eM5zGXIVPTznzyR -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:13 2025 by rpki-client